Security & Testing MCP Servers for Claude Code

MCP server for TLS certificate analysis via the Model Context Protocol

Forensic image analyzer detecting facial and visual anomalies.

Media forensic analyzer auditing audio and video authenticity.

Acoustic deepfake detector and voice biometrics auditor.

Daily data feeds MCP: CISA KEV+EPSS, SEC Form 4, 10-K sections, domain ranks. Keys $19/mo.

Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.

Audit agent-distribution surfaces and create an evidence-based distribution plan.

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

Deterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.

DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more.

MCP server for DNSFilter's DNS security/filtering API.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

WHOIS, DNS, SSL, IP geo for security forensics and OSINT — separate from SEO.

Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).

DVERA drives CT verification of mission-critical C/C++: setup, analysis, tests, coverage.

Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.

Capture a web source, or seal a hash you hold, into a signed receipt anyone can verify offline.

Encrypted env variables manager with zero-leak capabilities.

Tamper-evident evidence log: signed heads, proofs, and recording salted digests of your records.